Application Security Engineer III

3 weeks ago

Bengaluru, India Vimeo, Inc. Full time
You’ll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from infiltration and cyber-attacks.You love to solve puzzles and are a great team player.This role is remote.What you’ll do:Penetration testing

— either hunt for security issues on our production or staged applications during an open-box internal pen test or help coordinate an engagement with an external firmWriting code for internal automated security tools

— write some code, usually in Python, Bash, or Go, to support any of our team's various initiatives. Often, we strive to facilitate a culture of “paved roads” for our developers, such that it is easy for any developer to incorporate security into their designs and implementationsThreat modeling

— consider how malicious attackers may compromise our systems, and advise developers and product managers on what defenses are neededCode reviews

— discover weaknesses in our source code before it reaches productionBug bounty program

— help triage new incoming reports on a daily basis, plus launch creative initiatives to increase researcher engagement in our programsWeb Application Firewall and Rate Limiting

— expand coverage and tune new rules while coordinating with developers, support team members, and the site reliability teamRemediation

— enable and encourage developers to correctly fix recently discovered security issues in a timely manner, ultimately reducing our Mean Time To RemediateSecure Software Development Lifecycle

— configure automated tooling (eg. static and dynamic code analysis, IAST) in our SDLC to detect security issues in our source code before it reaches productionDeveloper Education, Security Culture

— create fun ways to spread technical security awareness throughout the engineering departmentIncident response

— lead or assist in running the various phases of incident response, including initial detection, triage, containment, recovery, root cause analysis, retrospective, etc.Collaboration with the infrastructure security team

— pair with members of the infrastructure security team on various projects to secure our cloud instances and employee workstationsCollaboration with the compliance and privacy team

— help ensure that our company complies with industry best practices and standardsProcess improvements

— help strengthen our own internal processes and proceduresA typical day will look like:Engage with one or more product development teams and guide them through a threat model and data flow analysis.Review the code for major new functionality to ensure security best practices are followed.Review new tickets in our bug bounty program ( and use your system design and threat modeling knowledge to reproduce, define risk and mitigating controls and propose a fix.A call or two with Development, Product Management teams to discuss security-related issuesPen test a new feature in a staging environment with Burp ProAssist the compliance team on a privacy-related projectProvide technical advice in response to occasional questions from developers and other members of the security teamSkills and knowledge you should possess:Required: 2+ years of prior experience in either software development, devops, or site reliability engineering with hands-on coding experience.Preferred: prior experience in Application Security4+ total years of relevant experience in Engineering, Application Security, or a similar technical field.Strong knowledge of modern web, mobile, and network securityStrong programming skills with at least one of the following languages, and the ability to read all of them: Python, Go, PHP, Javascript, and RubyExpertise with application pen testing, using tools like Burp or ZapConfident working in and across cloud environments like AWS and GCP. Detailed knowledge of at least one cloud environment.Confident with shell scriptingConfident with common SDLC components, like git, Jira, Jenkins, etcConfident ability to communicate technical security concepts to developersAt least an upper-intermediate level of EnglishBonus points (nice skills to have, but not needed):Link to a Github repo with security tools/scripts you’ve developed or help maintainFull-stack web development experience creating RESTful applications (in any language) is a big plusOpen-source vulnerability research or blog posts is a big plusExperience with system security hardening guidelines and SDLC principlesAbout Us:Vimeo (NASDAQ: VMEO) is the world's most innovative video experience platform. We enable anyone to create high-quality video experiences to better connect and bring ideas to life. We proudly serve our community of millions of users – from creative storytellers to globally distributed teams at the world's largest companies – whose videos receive billions of views each month. Learn more at

  • Application Security Engineer III

    4 weeks ago

    Bengaluru, India Livestream Full time

    As anApplication Security Engineer IIIat Vimeo, you will engage in a variety of activities, either offensive, defensive, or some combination thereof, ultimately aimed at safeguarding our users who entrust Vimeo with their content every day.You’ll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from...

  • Software Engineer III Java

    3 weeks ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.As a Software Engineer III at JPMorgan Chase within the Asset and Wealth Management, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure, stable, and scalable way. You are...

  • Software Engineer III- UI

    4 days ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.As a Software Engineer III at JPMorgan Chase within the Corporate & Investment Banking - Securities Services Technology, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure,...

  • Software Engineer III Java

    3 weeks ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.  As a Software Engineer III at JPMorgan Chase within the Asset and Wealth Management, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure, stable, and scalable way. You...

  • Software Engineer III- UI

    4 weeks ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.  As a Software Engineer III at JPMorgan Chase within the Corporate & Investment Banking - Securities Services Technology, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a...

  • Engineer III, Site Reliability Engineering

    2 weeks ago

    Bengaluru, India Omnicell, Inc Full time

    Software Engineer III, Site Reliability EngineeringResponsibilities:Implement tools and processes necessary to achieve required SLOs for Omnicell Platform.Implement CI/CD pipelines.Automate delivery of platform services using infrastructure-as-a-code. Build self-service playbooks for platform which can be consumed across globally distributed teams at...

  • Engineer III, Software

    6 days ago

    Bengaluru, India Omnicell, Inc Full time

    Engineer III, Software - Full stackThe Engineer III, Software is an experienced professional who participates in leading, creating and extending Omnicell products. This person is a highly skilled developer who can apply industry and corporate best practices to produce quality applications. This person applies their practical and theoretical knowledge from...

  • Software Engineer III- IOS

    2 days ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.As a Software Engineer III at JPMorgan Chase within the Wealth Management Business (CCB) under Self Directed Investing, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure,...

  • Software Engineer III

    1 week ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.As a Software Engineer III at JPMorgan Chase within Commercial Bank Digital Platforms team, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure, stable, and scalable way. You...

  • Software Engineer III

    1 week ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.  As a Software Engineer III at JPMorgan Chase within the Asset and Wealth management, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure, stable, and scalable way. You...

  • Engineer III, Software

    1 week ago

    Bengaluru, India Omnicell, Inc Full time

    Engineer III, Software - Full stack   The Engineer III, Software is an experienced professional who participates in leading, creating and extending Omnicell products. This person is a highly skilled developer who can apply industry and corporate best practices to produce quality applications. This person applies their practical and theoretical knowledge...

  • Engineer III, Site Reliability Engineering

    2 weeks ago

    Bengaluru, India Omnicell, Inc Full time

    Software Engineer III, Site Reliability Engineering Responsibilities: Implement tools and processes necessary to achieve required SLOs for Omnicell Platform. Implement CI/CD pipelines. Automate delivery of platform services using infrastructure-as-a-code. Build self-service playbooks for platform which can be consumed across globally distributed...

  • Senior Application Security Engineer

    4 weeks ago

    Bengaluru, India Zynga Full time

    AVAILABLE POSITIONS Senior Application Security EngineerCareers Category:EngineeringCareers location:Bengaluru, IndiaConnected Worker Type:ConnectedR_111904Job Summary:We are currently seeking a Senior Application Security Engineer to join our Product Security team. The team assesses, enables, and influences the secure design, development, operation and...

  • Security Engineer, Application Security

    4 weeks ago

    Bengaluru, India ADCI - Karnataka Full time

    In Amazon Stores, we ship some of the widest arrays of technology found at any company. From amazon.com to world class machine learning pipelines, from cutting-edge digital healthcare to no-checkout retail, we push the boundaries of technology in every direction using the globe’s largest AWS deployment.As an AppSec engineer, you will collaborate with...

  • Security Engineer, Application Security

    1 month ago

    Bengaluru, India Amazon Development Centre (India) Private Limited Full time

    In Amazon Stores, we ship some of the widest arrays of technology found at any company. From amazon.com to world class machine learning pipelines, from cutting-edge digital healthcare to no-checkout retail, we push the boundaries of technology in every direction using the globe’s largest AWS deployment.As an AppSec engineer, you will collaborate with...

  • Software Engineer III- IOS

    4 days ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level. As a Software Engineer III at JPMorgan Chase within the Wealth Management Business (CCB) under Self Directed Investing, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a...

  • Software Engineer III- SailPoint IdentityIQ

    2 days ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.As a Software Engineer III at JPMorgan Chase within the Infrastructure Platforms team, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure, stable, and scalable way. You are...

  • Software Engineer III

    1 week ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.  As a Software Engineer III at JPMorgan Chase within Commercial Bank Digital Platforms team, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure, stable, and scalable...

  • Software Engineer III

    4 weeks ago

    Bengaluru, India Spectrum Consultants India Private Limited Full time

    Software Engineer III SummaryExperience Required:7 - 10 YearsJob Term:PermanentLocation:BangaloreCategory:Software DevelopmentA leading designer, developer and global supplier of a broad range of digital and analog semiconductor connectivity solutions that serve the wired infrastructure, wireless communications, enterprise storage and industrial...

  • Software Engineer III- .Net,SQL,React

    2 weeks ago

    Bengaluru, India JPMorgan Chase & Co. Full time

    We have an exciting and rewarding opportunity for you to take your software engineering career to the next level.As a Software Engineer III at JPMorgan Chase within Employee Platforms, you serve as a seasoned member of an agile team to design and deliver trusted market-leading technology products in a secure, stable, and scalable way. You are responsible for...